/*
 * 太原学院计算机科学与技术系 （C） 版权所有。
 */
package cn.edu.tyu.finance.thingstype.servlet;

import java.io.IOException;
import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;

import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import cn.edu.tyu.finance.util.DbUtil;
import cn.edu.tyu.finance.util.StringUtil;

/**
 * 用户登录Servlet
 * @author guoru
 * @version 1.0
 */
@WebServlet("/LoginServlet")
public class LoginServlet extends HttpServlet {
	private static final long serialVersionUID = 1L;
       
    /**
     * @see HttpServlet#HttpServlet()
     */
    public LoginServlet() {
        super();
        // TODO Auto-generated constructor stub
    }

	/**
	 * 处理网页发来的Get请求
	 * @param request 请求对象
	 * @param response 响应对象
	 */
	protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		//1.接受用户名和密码
		String uname = request.getParameter("username");
		String upsw = request.getParameter("userpsw");
		String upswMD5 = StringUtil.getMD5(upsw);
		//2.连接数据库，查询有无此人
		Connection conn = null;
		PreparedStatement pstmt = null;
		ResultSet rs = null;
		conn = DbUtil.getConnection();//打开数据库的连接
		String sql = "SELECT * FROM users WHERE username=? AND userpsw=?";
			try {
				pstmt = conn.prepareStatement(sql);
				pstmt.setString(1, uname);
				pstmt.setString(2, upswMD5);
				rs = pstmt.executeQuery();
				if (rs.next()) {           
					response.sendRedirect("ok.jsp");
				}else {
					response.sendRedirect("fail.jsp");
				}
			} catch (SQLException e) {
				// TODO Auto-generated catch block
				e.printStackTrace();
			} finally {
				DbUtil.backConn(conn, pstmt, rs);
			}
		} 

	/**
	 * 处理网页发来的Post请求
	 * @param request 请求对象
	 * @param response 响应对象
	 */
	protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		// TODO Auto-generated method stub
		doGet(request, response);
	}

}
